13675 matches found
CVE-2014-0217
enrol/index.php in Moodle 2.6.x before 2.6.3 does not check for the moodle/course:viewhiddencourses capability before listing hidden courses, which allows remote attackers to obtain sensitive name and summary information about these courses by leveraging the guest role and visiting a crafted URL...
CVE-2014-0217: Exposure of Sensitive Information to an Unauthorized Actor
enrol/index.php in Moodle 2.6.x before 2.6.3 does not check for the moodle/course:viewhiddencourses capability before listing hidden courses, which allows remote attackers to obtain sensitive name and summary information about these courses by leveraging the guest role and visiting a crafted URL...
CVE-2014-0217
enrol/index.php in Moodle 2.6.x before 2.6.3 does not check for the moodle/course:viewhiddencourses capability before listing hidden courses, which allows remote attackers to obtain sensitive name and summary information about these courses by leveraging the guest role and visiting a crafted URL...
CVE-2014-0217
The CVE-2014-0217 entry concerns Moodle 2.6.x (before 2.6.3) where enrol/index.php fails to verify the moodle/course:viewhiddencourses capability before listing hidden courses. This allows remote attackers, leveraging the guest role, to disclose sensitive course names and summaries by visiting a ...
PT-2014-3541
Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.0 through 2.6.2 Description The issue allows remote attackers to obtain sensitive information about hidden courses by visiting a crafted URL, leveraging the guest role. This is due to the failure of enrol/index.php to check...
CVE-2013-1668
The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file...
PT-2014-2486
Name of the Vulnerable Software and Affected Versions CosCMS versions prior to 1.822 Description The issue allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file, specifically through the uploadFile function in upload/index.php...
CVE-2014-3846
Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...
CVE-2014-3846
Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...
CVE-2014-3846: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...
PT-2014-5548
Name of the Vulnerable Software and Affected Versions Flying Cart affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the p parameter to "index.php" API endpoint. Recommendations At the moment, there is no...
FineCMS多个SQL注射漏洞
简要描述： FineCMS多个SQL注射 详细说明： 注射文件存在于：/fang/目录下index.php文件 射点一：http://www.dayrui.net/fang/index.php 以官方演示站演示证明： http://www.dayrui.net/fang/index.php?c=search&area=2395&catid=1&order=updatetime' http://www.dayrui.net/fang/index.php?c=search&area=2395&zujin=0%2C500&catid=1'...
Crime24 Stealer v1 /index.php SQL注入漏洞
No description provided by source...
CVE-2013-5939
Multiple cross-site scripting XSS vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the 1 list or 2 introduce parameter to index.php...
CVE-2013-5939: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the 1 list or 2 introduce parameter to index.php...
PT-2014-3001
Name of the Vulnerable Software and Affected Versions PHPCMS affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Guestbook module. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically,...
CVE-2013-1407: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro plugin before 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 scope parameter to index.php; 2 username, 3 dbemphone, 4 useremail, or 5...
Xshop Cross Site Scripting
Exploit Title: Iran XshoP XSS Vulnerability Google Dork: Dork Is PerSian ! See End Of Demo ! Date: 2014-03-27 Exploit Author: Medrik Vendor Homepage: http://www.xshopsaz.ir/ Tested on: Windows ----------------- Proof : Vulnerability in : index.php Page With ftp Paramter ! Exploit :...